SB20240608230 - Improper locking in Linux kernel stmicro stmmac driver

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB20240608230

SB20240608230 - Improper locking in Linux kernel stmicro stmmac driver

Published: June 8, 2024 Updated: May 13, 2025

Security Bulletin ID SB20240608230
Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Denial of service

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Improper locking (CVE-ID: CVE-2024-26690)

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the stmmac_xdp_xmit_zc(), stmmac_tx_clean(), stmmac_tso_xmit(), stmmac_xmit(), stmmac_xdp_xmit_xdpf(), stmmac_dispatch_skb_zc(), stmmac_rx_zc(), stmmac_finalize_xdp_rx(), stmmac_rx(), stmmac_rx_refill(), stmmac_napi_poll_rx(), stmmac_napi_poll_tx(), stmmac_napi_poll_rxtx(), stmmac_get_stats64() and stmmac_dvr_probe() functions in drivers/net/ethernet/stmicro/stmmac/stmmac_main.c, within the stmmac_set_pauseparam() and stmmac_get_ethtool_stats() functions in drivers/net/ethernet/stmicro/stmmac/stmmac_ethtool.c, within the dwxgmac2_dma_interrupt() function in drivers/net/ethernet/stmicro/stmmac/dwxgmac2_dma.c, within the show_rx_process_state() and dwmac_dma_interrupt() functions in drivers/net/ethernet/stmicro/stmmac/dwmac_lib.c, within the dwmac4_dma_interrupt() function in drivers/net/ethernet/stmicro/stmmac/dwmac4_lib.c, within the sun8i_dwmac_dma_interrupt() function in drivers/net/ethernet/stmicro/stmmac/dwmac-sun8i.c. A local user can perform a denial of service (DoS) attack.


Remediation

Install update from vendor's website.

References